Secrets in the app.yaml file

Is there an alternative to storing the secrets, especially the MONGO_URL in the app yaml? 

I'd wish to only have one file to decrypt during my builds, for example in the new "meteor-google-cloud" section in the settings.json could be such a place...